$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/996fdef2-0e18-371e-acd0-550347f88ec9.roa File: 996fdef2-0e18-371e-acd0-550347f88ec9.roa (raw, json) Hash identifier: lWxchqiGviq9/XFbn624Y/slVxhMl5UJd3vSXRxBIHk= Subject key identifier: 7F:8A:6A:51:9E:3E:4F:56:6D:8C:8B:8F:ED:8A:56:E7:A1:7D:CB:FC Certificate issuer: /CN=89ee541c-de14-47cf-b4d0-081e933fb330 Certificate serial: 010D0C9F4328584F225D00D169BDF9DD605BA680 Authority key identifier: E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/996fdef2-0e18-371e-acd0-550347f88ec9.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 53809 IP address blocks: 64.111.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:00:d1:69:bd:f9:dd:60:5b:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ee541c-de14-47cf-b4d0-081e933fb330 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=e4311074-3399-4423-bed2-ba1ec96eda67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:2a:67:df:81:99:50:96:d9:c1:83:fd:11: 3b:ac:43:af:a0:3c:b5:4e:42:7f:6e:08:4d:7f:c3: a3:c1:8c:71:cd:49:d3:96:b5:50:e3:61:6f:8d:27: 8f:c0:e0:10:ba:10:df:69:69:6d:73:63:87:43:34: 00:c2:1a:40:2e:6a:c1:d8:7c:f6:9f:d6:e7:cb:89: 31:b1:f6:1d:e5:71:e3:5e:e5:7d:a1:b0:1a:a0:b6: 09:60:72:d4:c0:17:16:4d:6c:21:b9:25:bb:4b:cd: b0:13:49:d4:b1:4c:d7:a4:47:ac:b5:9b:59:83:b3: 86:a7:9f:f0:91:c0:ce:13:ad:08:20:7f:96:93:2e: fc:ac:94:8c:b4:e5:7a:ab:d5:d1:44:d9:8a:34:ac: 94:4d:1a:72:2c:9c:13:a6:8c:8c:fb:c9:ba:1a:34: 74:99:63:25:dd:ce:e9:7b:8c:cf:89:93:dd:1f:bc: da:f3:9b:4c:1a:db:12:19:f8:6c:b2:61:88:e4:1d: 51:65:1b:fa:cf:73:7d:b0:35:e2:ed:02:b7:d1:1d: 92:c1:33:7f:60:05:ad:0e:cf:30:33:b0:c2:73:3d: d9:52:c0:d8:70:87:15:7c:96:97:f7:ef:02:96:6d: 47:bc:84:6d:6b:40:4a:5c:06:49:b5:9c:6a:d4:e8: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8A:6A:51:9E:3E:4F:56:6D:8C:8B:8F:ED:8A:56:E7:A1:7D:CB:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/996fdef2-0e18-371e-acd0-550347f88ec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl X509v3 Authority Key Identifier: keyid:E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer sbgp-ipAddrBlock: critical IPv4: 64.111.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:86:7c:a2:06:42:e2:58:89:7e:27:09:80:21:66:c7:c7:96: 16:06:26:71:91:18:d8:59:03:ac:d4:73:a9:69:08:60:c9:91: 5e:7c:f0:cb:b4:ac:30:50:9b:0a:7e:44:65:d9:71:89:c6:16: c4:1a:e6:ce:59:77:63:21:ef:f7:59:6b:a5:78:b4:61:20:87: 96:64:1d:a8:ff:5c:38:93:e5:2b:41:8a:e6:be:2f:ef:da:10: a2:2f:05:fb:71:5b:65:85:23:b6:d0:ad:46:d2:91:60:e7:bd: 4e:dc:06:3c:fd:fc:92:c5:38:5c:57:05:0d:35:94:e1:82:dd: 62:d6:07:c3:6b:13:67:d2:75:5a:9d:92:46:0c:19:4e:e4:37: 3f:12:46:5e:28:97:e8:ec:d8:cd:e2:c5:8d:a6:95:19:b5:2a: 46:b2:a6:1c:79:f2:a0:bc:26:28:df:3b:aa:a2:86:36:70:9e: 7b:da:da:c1:81:50:e2:86:39:bf:d6:99:35:2d:0d:f3:bf:1f: 2e:64:03:2a:e1:5f:c0:d5:26:b4:e2:c7:5c:42:ab:93:06:76: 43:f7:eb:5a:73:1e:14:88:1c:c9:d9:ee:47:35:b6:41:40:69: d2:cf:df:3d:19:ba:c8:4a:e0:ad:3e:4d:98:3a:b2:56:b5:c6: ae:9d:ba:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQDRab353WBbpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZTU0MWMtZGUxNC00N2NmLWI0ZDAtMDgxZTkzM2Zi MzMwMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTQzMTEwNzQtMzM5OS00NDIzLWJlZDItYmExZWM5NmVkYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzwqZ9+BmVCW2cGD/RE7rEOvoDy1TkJ/bghN f8OjwYxxzUnTlrVQ42FvjSePwOAQuhDfaWltc2OHQzQAwhpALmrB2Hz2n9bny4kx sfYd5XHjXuV9obAaoLYJYHLUwBcWTWwhuSW7S82wE0nUsUzXpEestZtZg7OGp5/w kcDOE60IIH+Wky78rJSMtOV6q9XRRNmKNKyUTRpyLJwTpoyM+8m6GjR0mWMl3c7p e4zPiZPdH7za85tMGtsSGfhssmGI5B1RZRv6z3N9sDXi7QK30R2SwTN/YAWtDs8w M7DCcz3ZUsDYcIcVfJaX9+8Clm1HvIRta0BKXAZJtZxq1Oh7FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+KalGePk9WbYyLj+2KVuehfcv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84OWVl NTQxYy1kZTE0LTQ3Y2YtYjRkMC0wODFlOTMzZmIzMzAvOTk2ZmRlZjItMGUxOC0z NzFlLWFjZDAtNTUwMzQ3Zjg4ZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODllZTU0MWMtZGUxNC00N2NmLWI0 ZDAtMDgxZTkzM2ZiMzMwLzg5ZWU1NDFjLWRlMTQtNDdjZi1iNGQwLTA4MWU5MzNm YjMzMC5jcmwwHwYDVR0jBBgwFoAU5c6XU3jki2pUQn5MS4/XJvVL58swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84OWVlNTQxYy1kZTE0LTQ3Y2YtYjRkMC0wODFl OTMzZmIzMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQG8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeGfKIGQuJYiX4nCYAhZsfHlhYGJnGRGNhZA6zUc6lpCGDJkV588Mu0 rDBQmwp+RGXZcYnGFsQa5s5Zd2Mh7/dZa6V4tGEgh5ZkHaj/XDiT5StBiua+L+/a EKIvBftxW2WFI7bQrUbSkWDnvU7cBjz9/JLFOFxXBQ01lOGC3WLWB8NrE2fSdVqd kkYMGU7kNz8SRl4ol+js2M3ixY2mlRm1Kkayphx58qC8JijfO6qihjZwnnva2sGB UOKGOb/WmTUtDfO/Hy5kAyrhX8DVJrTix1xCq5MGdkP361pzHhSIHMnZ7kc1tkFA adLP3z0ZushK4K0+TZg6sla1xq6duic= -----END CERTIFICATE-----Generated at Sun Sep 27 12:38:54 2026 by rpki-client